Staff Security Engineer | Security Engineering

ServiceNow

1d

About The Position

ServiceNow’s Enterprise Security organization is seeking a versatile Senior Staff Security Systems Engineer to support multiple security engineering functions in its Canadian regulated environment. The role spans identity, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations. It is suited to an engineer who enjoys working across disciplines, solving varied problems, and building scalable automation.

The position serves as the senior technical authority for security engineering in the Canada regulated environment. It engineers, hardens, and operates security controls across on-premises, cloud, and isolated infrastructure; builds automation and infrastructure-as-code; and partners with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines. The engineer also supports security tools based on team priorities and produces operational and executive-facing reports on security posture and performance.

This position supports Government of Canada Protected B workloads. Applicants must be Canadian citizens or permanent residents, live in Canada, perform all work from within Canada, and obtain and maintain Government of Canada Reliability Status. Screening includes five years of verifiable background history, identity and education verification, a criminal record check, and a credit check. ServiceNow sponsors the screening. Employment is conditional on successfully completing and maintaining the required screening; a higher level of security clearance may be required in the future.

Requirements

• At least 8 years of hands-on security or systems engineering experience in large-scale enterprise environments.
• Expert Linux administration and troubleshooting skills across OS internals, host networking, storage, virtualization, and containers.
• Proficiency with DNS, NTP, and LDAP services.
• Proficiency in Python and Shell for production-grade automation and integrations.
• Experience with DevOps methodologies, including infrastructure-as-code and configuration management (Terraform, Ansible, or Puppet), CI/CD pipelines, and Git-based workflows.
• Expertise in network security fundamentals, including firewalls, segmentation, load balancers, and proxies.
• Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls.
• Experience using AI in work, such as AI-powered tools, automated workflows, AI-driven insights, or evaluating opportunities for AI to change how a function operates.
• Understanding of Canada Protected B classification and data residency requirements for Canadian government systems.
• Hands-on experience in at least two specialty areas: identity and access management; vulnerability management; public cloud security; security data platforms; infrastructure security; ServiceNow administration; or ServiceNow Security Operations.
• Meet the role’s eligibility requirements: be a Canadian citizen or permanent resident, live and work from within Canada, and obtain and maintain Government of Canada Reliability Status.

Nice To Haves

• Certifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.
• Experience supporting highly regulated, isolated, or air-gapped government environments.
• Strong understanding of ITIL and ITSM processes.

Responsibilities

• Serve as the senior technical authority for security engineering in the Canada regulated environment.
• Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
• Build automation and infrastructure-as-code to streamline security engineering and operations, reporting, and remediation.
• Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.
• Support security tooling across identity, vulnerability scanning, logging, and cloud security based on team priorities.
• Produce operational and executive-facing reporting on security posture and performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed